Cloud security in the era of WikiLeaks
Salesforce helped pioneer the concept of putting confidential organizational data in a "public cloud" system. Other key vendors offering public cloud data services include Microsoft Azure and Amazon S3 services. "Cloud" has come to mean many things to many people as far as putting internal office functions up on the Internet. The word “public” is important to understand. This means that all data--every corporate and nonprofit user--sits in one enormous database. This is in fact a reassurance, not a drawback. In a public cloud web service, the vendor focuses its security attentions on one system, top to bottom.
Public Clouds and the Apartment Building Analogy
How much security responsibility do you want to have in the era of WIkiLeaks?
A different security issue concerns how much can we trust a cloud vendor to maintain the confidentiality and privacy of data you entrust to them. This is a consideration with any software any of us uses these days. We live in an era of WikiLeaks, apparent semi-official Chinese theft of Google and Adobe data, Israeli attacks on Iranian nuclear power system networks, and newly intrusive data mining by US authorities.